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Abstract 

We present a three-stage quantum cryptographic protocol based on 
públic key cryptography in which each party uses its own secret key 
Unlike the BB84 protocol, where the qubits are transmitted in only 
one direction and classical information exchanged thereafter, the com- 
munication in the proposed protocol remains quantum in each stage. 
A related system of key distribution is also described. 

Introduction 

This paper presents a quantum protocol based on públic key cryptogrpahy 
for secure transmission of data over a públic channel. The security of the 
protocol derives from the fact that Alice and Bob each use secret keys in 
the múltiple exchange of the qubit. 

Unlike the BB84 protocol [1] and its many variants (e.g. [2]- [4]), where 
the qubits are transmitted in only one direction and classical information 
exchanged thereafter, the communication in the proposed protocol remains 
quantum in each stage. In the BB84 protocol, each transmitted qubit is in 
one of four different states; in the proposed protocol, the transmitted qubit 
can be in any arbitrary state. 

The Protocol 

Consider the arrangement of Figure 1 to transfer state X from Alice to 
Bob. The state X is one of two orthogonal states, such as 0) and |1), or 
-U(|0) + |1)) and ^(|0}-|1)), ora|0)+/9|l) and @\ti) -a\l). The orthogonal 
states of X represent and 1 by prior mutual agreement of the parties, and 




Figure 1: Three-stage protocol for quantum cryptography where U aUb = 
U B U A 



this is the data or the cryptographic key being transmitted over the públic 
channel. 

Alice and Bob apply secret transformations Ua and Ub which are com- 
mutative, i.e., V aUb = UbU a- An example of this would be Ua = R{0) and 
Ub = R(<f>), each of which is the rotation operator: 

. . cos9 —sinO 
sinO cosO 



The sequence of operations in the protocol is as follows: 

1. Alice applies the transformation Ua on X and sends the qubit to Bob. 

2. Bob applies Ub on the received qubit Ua{X) and sends it back to 
Alice. 
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3. Alice applies U A on the received qubit, converting it to Ub(X), and 
forwards it to Bob. 

4. Bob applies U B on the qubit, converting it to X. 

At the end of the sequence, the state X, which was chosen by Alice and 
transmitted over a públic channel, has reached Bob. 

Eve, the eavesdropper, cannot obtain any information by intercepting the 
transmitted qubits, although she could disrupt the exchange by replacing 
the transmitted qubits by her own. This can be detected by 

• appending parity bits, and/or 

• appending previously chosen bit sequences, which could be the des- 
tination and sending addresses or their hashed vàlues, or some other 
mutually agreed sequence. 

Since the U transformations can be changed as frequently as one pleases, 
Eve cannot obtain any statistical clues to their nature by intercepting the 
qubits. 

Key distribution protocol 

A related key distribution protocol is given in Figure 2. Unlike the previous 
case, X is a fixed públic state (say |0) or ^(|0) + The objective is to 

generate a key that is a function of the transformations involved, which is 
not chosen in advance by either party. The protocol consists of two stages: 

1. Alice and Bob use secret transformations, Ua and Ub, on the known 
state X, and exchange these qubits. 

2. They again apply the same transformations on the received qubits, 
thereby each getting UaUb(X), since UaUb = UbUa- It is assumed 
that neither Alice or Bob will measure the received qubits, and will 
use them as the input to a quantum register. 

In a variant of this scheme, two copies of the unknown state X may be 
supplied to Alice and Bob by a key registration authority. 
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Figure 2: Key distribution protocol, where UaUb = UbUa- 



Conclusion 

The three-stage protocol provides perfect security in the exchange of data 
over a públic channel under the assumptions that a separate classical proto- 
col ensures the identity of the two parties, and errors (deliberate or random) 
are detected by means of parity check and confirming that a known bit se- 
quence that was appended to the bits has arrived correctly. 

Since the proposed protocol does not use classical communication, it is 
immune to the man-in-the-middle attack on the classical communication 
channel which BB84 type quantum cryptography protocols suffers from [5] . 
On the other hand, implementation of this protocol may be harder because 
the qubits get exchanged múltiple times. 
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